News

New email scam going around

A new email scam is finding its way to users’ inboxes. If you receive the email below, or a similar email, please delete it and definitely do not click on the link! The e-mail asks for your phone number and supposedly links to photos of Sarah's wedding to Timothy Hansen. The link is not to photos, but a download for a .zip file that could install malicious software on your computer.

The emails appear to be from Sarah Norman, Sarah Anderson and Sarah Russell (@gmail.com) with the same text in the body and with “Hiiii” at the beginning of the subject. The links appear to be different in each variant of the mail.

Please do not respond to Sarah's request for your phone number and do not download the file linked within the email. It is a scam. If you click the link, the zip that it downloads will unzip into three “weddingX.jpg.exe” executable files.

================================================
Subject:  Hiiii <your name>

Hiiiiiiiiiiiiiiiii <your name>, it’s Sarah here, it was such a long time we didn’t contact each other, how is it going with you there ? I heard that you got a new job, didn’t you? Is everything ok there ? Hey, can you believe it! I got married to Timothy ! Yes I did. I tried to call but you did not answer. You have changed your number, haven’t you? Just give me your current telephone number if you read this mail. It’s really a pity that we did not see you in our wedding. I wanted to invite you so much. Well, here I’m sending you a few pics taken in our wedding:

http ://www –dot –timothyhansen –dot -com/pictures/wedding/

Let’s keep in touch then.

Love,

Sarah & Timothy
================================================

RECOMMENDATIONS:
We recommend the following actions be taken:

• Network and system administrators should not go to the website from the agency network.
• Don't open e-mail attachments and/or links from unknown users.
• Don't open attachments and/or links from unexpected e-mails from trusted sources – note that THIS malicious email was sent from known sources.
• Don't visit untrusted websites or follow links provided by unknown or untrusted sources.
• Run all software as a non-privileged user (one without administrative privileges) to diminish the effects of a successful attack.
• Ensure anti-virus is up-to-date.